2011-06-04 Jeffrey Pfau <jpfau@apple.com>
authorcommit-queue <commit-queue@webkit.org>
Sat, 4 Jun 2011 10:32:26 +0000 (10:32 +0000)
committerAdemar de Souza Reis Jr <ademar.reis@openbossa.org>
Mon, 6 Jun 2011 14:34:35 +0000 (11:34 -0300)
commitf098de229262f0c9b8af54162332ba8d6e8cb771
treed5420fc799582a71d1b3829e66dac5e919af1f24
parent98ac1d2e0112f09c4a1749c78eaae188dec89870
2011-06-04  Jeffrey Pfau  <jpfau@apple.com>

        Reviewed by Beth Dakin.

        Crash in WebCore::RenderMathMLSubSup::baselinePosition()
        https://bugs.webkit.org/show_bug.cgi?id=57897

        Added simple test that hits the relevant code.

        * mathml/msubsup-remove-children-expected.txt: Added.
        * mathml/msubsup-remove-children.xhtml: Added.
2011-06-04  Jeffrey Pfau  <jpfau@apple.com>

        Reviewed by Beth Dakin.

        Crash in WebCore::RenderMathMLSubSup::baselinePosition()
        https://bugs.webkit.org/show_bug.cgi?id=57897

        Simple patch adding NULL checks in each function.
        Test: mathml/msubsup-remove-children.xhtml

        * rendering/mathml/RenderMathMLSubSup.cpp:
        (WebCore::RenderMathMLSubSup::stretchToHeight):
        (WebCore::RenderMathMLSubSup::baselinePosition):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@88104 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/mathml/msubsup-remove-children-expected.txt [new file with mode: 0644]
LayoutTests/mathml/msubsup-remove-children.xhtml [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/rendering/mathml/RenderMathMLSubSup.cpp